summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* apps/speed.c: Fix crash when config loading failsOpenSSL_1_0_1-stableVitezslav Cizek2016-11-261-6/+4
* modes/ctr128.c: fix false carry in counter increment procedure.Andy Polyakov2016-11-251-1/+1
* Missed a mention of RTRich Salz2016-11-041-12/+12
* Secure our notification email.Richard Levitte2016-11-021-1/+1
* Fix grammar-o in CONTRIBUTINGBenjamin Kaduk2016-11-011-1/+1
* Fix leak of secrecy in ecdh_compute_key()Dr. Matthias St. Pierre2016-10-251-1/+3
* Degrade 3DES to MEDIUM in SSL2Vitezslav Cizek2016-10-141-1/+1
* RT is put out to pastureRich Salz2016-10-132-63/+24
* Prepare for 1.0.1v-devMatt Caswell2016-09-225-5/+13
* Prepare for 1.0.1u releaseOpenSSL_1_0_1uMatt Caswell2016-09-224-6/+6
* Updates CHANGES and NEWS for new releaseMatt Caswell2016-09-222-3/+167
* Avoid KCI attack for GOSTDmitry Belyavsky2016-09-221-19/+0
* Fix OCSP Status Request extension unbounded memory growthMatt Caswell2016-09-221-7/+17
* update default dependency optionsDr. Stephen Henson2016-09-211-1/+1
* Make message buffer slightly larger than message.Dr. Stephen Henson2016-09-212-2/+9
* Use SSL3_HM_HEADER_LENGTH instead of 4.Dr. Stephen Henson2016-09-211-10/+16
* Remove unnecessary check.Dr. Stephen Henson2016-09-211-5/+0
* Fix small OOB reads.Dr. Stephen Henson2016-09-212-0/+17
* Fix SSL_export_keying_material() for DTLS1_BAD_VERDavid Woodhouse2016-08-261-1/+1
* Avoid overflow in MDC2_Update()Dr. Stephen Henson2016-08-241-1/+1
* SWEET32 (CVE-2016-2183): Move DES from HIGH to MEDIUMRich Salz2016-08-242-18/+20
* Sanity check ticket length.Dr. Stephen Henson2016-08-231-3/+8
* Fix overflow check in BN_bn2dec()Kazuki Yamaguchi2016-08-221-3/+2
* Prevent DTLS Finished message injectionMatt Caswell2016-08-221-0/+6
* Fix DTLS buffered message DoS attackMatt Caswell2016-08-225-29/+47
* Fix off by 1 in ASN1_STRING_set()Kurt Roeckx2016-08-201-1/+1
* RT3940: For now, just document the issue.Rich Salz2016-08-192-0/+6
* Update function error codeMatt Caswell2016-08-191-1/+1
* Fix DTLS replay protectionMatt Caswell2016-08-193-13/+52
* Fix DTLS unprocessed records bugMatt Caswell2016-08-191-2/+21
* make update to have PEM_R_HEADER_TOO_LONG definedRichard Levitte2016-08-162-1/+3
* Limit reads in do_b2i_bio()Dr. Stephen Henson2016-08-161-0/+7
* Check for errors in BN_bn2dec()Dr. Stephen Henson2016-08-161-3/+8
* Check for errors in a2d_ASN1_OBJECT()Dr. Stephen Henson2016-08-161-2/+6
* Sanity check input length in OPENSSL_uni2asc().Dr. Stephen Henson2016-08-051-0/+4
* Leak fixes.Dr. Stephen Henson2016-08-053-6/+6
* Return error when trying to print invalid ASN1 integerKurt Roeckx2016-08-041-0/+2
* Limit recursion depth in old d2i_ASN1_bytes functionDr. Stephen Henson2016-08-041-15/+43
* Check for overflows in i2d_ASN1_SET()Dr. Stephen Henson2016-08-041-2/+7
* Calculate sequence length properly.Dr. Stephen Henson2016-08-031-1/+1
* include <limits.h>Dr. Stephen Henson2016-08-031-0/+1
* Check for overflows in ASN1_object_size().Dr. Stephen Henson2016-08-021-12/+16
* Check for overlows and error return from ASN1_object_size()Dr. Stephen Henson2016-08-022-10/+17
* Fix OOB read in TS_OBJ_print_bio().Dr. Stephen Henson2016-07-221-3/+2
* Convert memset calls to OPENSSL_cleanseMatt Caswell2016-06-306-6/+15
* Allow proxy certs to be present when verifying a chainRichard Levitte2016-06-302-0/+7
* Fix proxy certificate pathlength verificationRichard Levitte2016-06-301-7/+21
* Check that the subject name in a proxy cert complies to RFC 3820Richard Levitte2016-06-305-2/+84
* Change usage of RAND_pseudo_bytes to RAND_bytesMatt Caswell2016-06-2730-62/+54
* More fix DSA, preserve BN_FLG_CONSTTIMEMatt Caswell2016-06-071-3/+8